SUNWAY UNIVERSITY // ANNUAL CAPTURE THE FLAG
sunctf26{y0u_f0und_th3_fl4g}> cat ./mission_brief.txt
The flags are hidden. The challenge awaits. SUNCTF 2026 is the Sunway Cybersecurity Club's flagship annual capture-the-flag, back for its third edition and bigger than ever.
It's a jeopardy-style CTF: a board of challenges across web, crypto, reverse engineering, pwn, forensics, OSINT and misc. Every solve captures a flag, every flag scores points, and the sharpest mix of skill, strategy and teamwork climbs the board.
Grab 1-3 friends and come hunt glory. The cold hard facts live next door in event.cfg.
> _
> ./briefing --info
status: CONFIRMED_
// pre-game briefing: challenge format, rules walkthrough, and your questions answered before the board goes live.
> ./run_gameday.sh --verbose
> sunctf-fw --list-rules
# access_control
# no student id, no shell
# team_formation
# pick a name you'd be proud to see on a projector
# game_day
# loadout
# a hacker is only as good as their extension cord
# comms
# declaration :: signed at registration
CSC members pay RM25. Sunway students pay RM35 early bird / RM40 normal. Students from other Malaysian universities pay RM40 early bird / RM50 normal. All per person.
All active Malaysian university students. Students from different universities are welcome to team up together, mixed squads are completely fine.
No solo runs this time, teams are 2 to 4 players. Short on teammates? Hop into the CSC Discord and find your people in the #SunCTF2026 channel.
Registration has been extended, and now runs until the seats are full. Slots are limited and it's first come, first served, so don't sit on it. Early bird pricing ended 19 JUL 2026. Only the team captain fills in the form, once, for the whole squad.
Nope, SUNCTF 2026 is fully in-person at the venue in event.cfg. Transport there and back is your own arrangement.
Each player: a laptop + charger, ideally with a virtual machine installed (Kali Linux preferred). Each team: at least one extension cord, since outlets are limited. A personal hotspot is recommended but not required.
Yes! Lunch and tea-time refreshments are provided. Pick your preferred lunch option in the registration form.
Every participant uploads an up-to-date professional CV at registration. It may be shared with companies for recruitment, networking or evaluation. Sponsors come to scout, so give it a quick polish before you upload.
Your registration is complete once payment is verified by the organizing committee. Keep an eye on your email for updates, and stay in the Discord for announcements.
just train then lil bro.
Seriously though, that's genuinely the move. The beginner CTF tools on our loot_drop page exist for exactly this: TryHackMe, picoCTF, HackTheBox, OverTheWire. A few weeks of reps and you'll walk into the hall dangerous. There's always a sanity-check-tier challenge with your name on it.
The main channel is the CSC Discord: ping our helpers or ask in #SunCTF2026 for technical difficulties or feedback.
WhatsApp (texting only): Salli +6011-1160 8283 · Sam +6011-3330 1509 · Mustafa +6011-1784 6957.
Email: csc.sunway@gmail.com
Bigger board, bigger turnout. Teams from across Malaysia grinding challenges till the very last minute.
Where it all started. The first flag was planted, the scoreboard survived, and the tradition was locked in.
Registration for SUNCTF 2026 is open now. Grab your team before the board fills up.
register_now